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What is claimed is: 



1. A method comprising: 

accepting a segment of data from a host system, a 
portion of the segment identifying a broadcast domain; 

comparing the portion with an identifier for a selected 
broadcast domain; and 

filtering the segment from a network connection based 
on the comparison. 

2 . The method of claim 1 wherein the host system 
comprises a computer system having a protocol stack 
configured to generate data packets. 

3 . The method of claim 2 wherein the segment of data 
comprises a frame including one of the data packets. 

4. The method of claim 3 wherein the portion 
comprises a VLAN ID. 

5. The method of claim 4 wherein the VLAN ID is 
configured according to an IEEE 802. 1Q VLAN protocol. 

6. The method of claim 4 further comprising 
generating the VLAN ID based on a network address . 
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7. The method of claim 1 wherein the segment is 
filtered from the network connection if the portion 
corresponds to the identifier. 

8. The method of claim 1 wherein the segment is 
filtered from the network connection if the portion does not 
correspond to the identifier. 

9. The method of claim 1 wherein the filtering 
comprises blocking the segment from being transmitted over 
the network connection. 

10. The method of claim 1 wherein the filtering 
comprises intentionally corrupting the segment so that the 
segment is discarded from traffic received over the network 
connection. 

11. The method of claim 1 wherein the identifier is 
inaccessible by the host system. 

12. The method of claim 1 wherein the identifier is 
inaccessible by the host system after a boot phase. 

13. The method of claim 1 wherein the segment is 
accepted from the host system over a data bus. 

14. The method of claim 2 further comprising: 
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accepting a second segment of data from a physical 
layer network interface, a portion of the second segment 
identifying a broadcast domain; 

comparing the portion of the second segment with an 
identifier for a broadcast domain associated with the host 
system; and 

sending the second segment to the host system if the 
portion of the second segment corresponds to the identifier 
for the broadcast domain associated with the host system. 

15. The method of claim 14 wherein the identifier for 
the broadcast domain associated with the host system is 
inaccessible by the host system. 

16. The method of claim 14 wherein the identifier for 
the broadcast domain associated with the host system is 
inaccessible by the host system after a boot phase. 

17. An apparatus comprising: 

an interface to establish a network connection; 
a network controller configured to 

accept a segment of data from a host system, a portion 
of the segment identifying a broadcast domain; 

compar the portion with an identifier for a selected 
broadcast domain; and 

filter the segment from the network connection based on 
the comparison. 
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18. The apparatus of claim 17 wherein the host system 
comprises a computer system having a protocol stack 
configured to generate data packets. 

19. The apparatus of claim 18 wherein the segment of 
data comprises a frame including one of the data packets. 

20. The apparatus of claim 19 wherein the portion 
comprises a VLAN ID. 

21. The apparatus of claim 17 wherein the segment is 
filtered from the network connection if the portion 
corresponds to the identifier. 

22. The apparatus of claim 17 wherein the segment is 
filtered from the network connection if the portion does not 
correspond to the identifier. 

23. The apparatus of claim 17 wherein the filtering 
comprises blocking the segment from being transmitted over 
the network connection. 

24. The apparatus of claim 17 wherein the filtering 
comprises intentionally corrupting the segment so that the 
segment is discarded from traffic received over the network 
connection. 
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25. The apparatus of claim 17 wherein the identifier 
is inaccessible by the host system. 

26. The apparatus of claim 17 wherein the identifier 
is inaccessible by the host system after a boot phase. 

27. A system comprising: 
a host system; 

an interface to establish a network connection between 
a network and the host system; and 

a network controller configured to 

accept a segment of data from the host system, a 
portion of the segment identifying a broadcast domain; 

compare the portion with an identifier for a 
selected broadcast domain; and 

filter the segment from the network connection 
based on the comparison. 

28. The system of claim 27 further comprising a 
management system having a protocol stack configured to 
generate management packets. 

29. The system of claim 27 wherein the host system 
comprises a computer system having a protocol stack 
configured to generate data packets. 
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30. The system of claim 28 wherein the segment of data 
comprises a frame including one of the data packets. 

31. The system of claim 29 wherein the portion 
comprises a VLAN ID. 

32. The system of claim 27 wherein the segment is 
filtered from the network connection if the portion 
corresponds to the identifier. 

33. The system of claim 27 wherein the segment is 
filtered from the network connection if the portion does not 
correspond to the identifier. 

34. The system of claim 27 wherein the filtering 
comprises blocking the segment from being transmitted over 
the network connection. 

35. The system of claim 27 wherein the filtering 
comprises intentionally corrupting the segment so that the 
segment is discarded from traffic received over the network 
connection . 

36. The system of claim 27 wherein the identifier is 
inaccessible by the host system. 
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37. The system of claim 27 wherein the identifier is 
inaccessible by the host system after a boot phase. 

38. A system comprising: 

a router; 

a host system; 

an interface to establish a network connection 
between the router and the host system; and 

a network controller configured to 

accept a segment of data from the host system, a 
portion of the segment identifying a broadcast domain; 

compare the portion with an identifier for a 
selected broadcast domain; and 

filter the segment from the network connection 
based on the comparison. 

39. The system of claim 38 wherein the portion 
comprises a VLAN ID. 
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